Your privacy is important to us. It is Alkimi AI's policy to respect your privacy regarding any information we may collect from you across our website, https://alkimi.ai, and other sites we own and operate.
1. Information We Collect
We collect the following types of information:
- Account Information: When you register, we collect your email address, name, and profile picture.
- File Data: Data contained within files you upload to the service.
- Usage Data: Information about how you interact with our application, including access times, pages viewed, and features used.
- Device Information: Information about the device you use to access our service, including IP address, browser type, and operating system.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services.
- Create and manage your account.
- Process and fulfill your requests.
- Send you technical notices, updates, and support messages.
- Monitor and analyze usage patterns and trends.
- Enhance the security of our application.
3. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances and with the types of service providers listed below:
- With Your Consent: With your explicit consent or at your direction. An example of this is when you use our feature to share a conversation. You control who can see the shared content by selecting the visibility ("External" or "Organization-only") and can revoke access at any time. We provide tools, such as automated PII redaction, to help you protect your privacy when using this feature.
- Compliance with Laws: When required by applicable law, regulation, or legal process.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred.
4. Our Service Providers & Sub-processors
To provide and improve our service, we use a number of third-party companies who act as sub-processors. We have verified that these providers have robust security and privacy practices in place.
- Cloud Infrastructure: We use Google Cloud Platform (GCP) for our core hosting infrastructure, including compute services (Cloud Run) and our database (Cloud SQL).
- Content Delivery & Web Hosting: We use Cloudflare Pages to host and deliver our web application content securely and efficiently.
- Payment Processing: All billing and payment information is managed by Stripe. We do not store any credit card information on our own servers.
- Large Language Model (LLM) Providers: To provide the core AI functionality of our service, we send relevant data to third-party LLM providers. Our primary provider is Google Cloud Platform (GCP) for Gemini models, but we may also use others such as Microsoft Azure, AWS Bedrock, or OpenRouter depending on the model selected. The specific model provider used for an agent is always disclosed within the application during the agent configuration process. As stated previously, PII is only shared when necessary for the model to process a request and we maintain appropriate data processing agreements with these providers to protect this information.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Your Data Rights
Depending on your location, you may have certain rights regarding your personal information, including:
- The right to access your personal data.
- The right to correct inaccurate data.
- The right to request deletion of your data.
- The right to request restriction of processing.
- The right to data portability.
- The right to object to processing.
- The right to manage and revoke access to any content you have shared.
To exercise these rights, please contact us using the details provided below.
7. Our Role as a Data Processor
When you use our services to process data you have uploaded or provided ("Content"), you are the "Data Controller" and Alkimi AI is the "Data Processor" under GDPR. We will only process your Content in accordance with your instructions, as described in our Terms of Service and this Privacy Policy.
8. Student Data & Higher Education (FERPA)
Our services are primarily designed for higher education institutions and adult learners. We do not knowingly collect personal information from children under 13 outside of an educational context.
We are actively working towards ensuring our service can be used by higher education institutions in a manner consistent with the Family Educational Rights and Privacy Act (FERPA). When our service is used by a higher education institution, the institution acts as the custodian of student education records, while students (who are typically adults) retain their FERPA rights. We process student data only for the purpose of providing our services to the educational institution and are building our platform with student privacy protections in mind.
9. Changes to This Privacy Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.
Contact Us
If you have any questions about this Privacy Policy, please contact us at: [email protected]